Security and data

What leaves the workspace

A connected AI app receives whatever the tools it calls return: names, text, transcripts, figures and, with download, links to files. That content is then handled under the AI app’s own terms. Grant the narrowest scopes that do the job.

• File content is returned only for files whose AI indexing is turned on.
• Teammates’ names appear only with the directory scope. Without it, comments and notifications come back without their authors.
• A connected app cannot publish, schedule or delete, whatever it is asked to do.

Text in results is data, not instructions

File names, descriptions, comments, documents and transcripts are written by people, and a result can contain text that reads like an instruction to the model. Every tool result carries a _notice field saying that workspace text is untrusted data. If you build an agent on this endpoint, keep that boundary: never let text returned by a tool decide what the agent does next without a person in the loop for anything that matters.

What Soontra records

• Every request is written to an activity log: which credential, which tool, when, and whether it worked.
• Arguments are recorded as the names of the fields and the length of each value, never the values themselves.
• Entries are kept for 90 days.
• Owners and admins can see recent tool calls under Settings, API & MCP.

Checks on writes

Text written through the endpoint is checked by moderation before it is saved. If the check cannot run, the write is refused rather than let through.

Shutting access off

• A signed-in app: disconnect it under Settings, API & MCP. It stops at its next request.
• An API key: revoke it there. Revoking is immediate and permanent.
• Everything: the workspace owner can revoke all keys and disconnect all apps at once.
• A person leaving: removing someone from the workspace, or changing their role to member, stops every connection and key they created.

The endpoint

• All traffic is HTTPS to https://app.soontra.com/api/mcp.
• API keys are stored as hashes. Soontra cannot show a key again after it is created.
• A key can be limited to up to 20 IP addresses or CIDR blocks.